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1. INTRODUCTION 

1.1 Quantified Constraints 

Quantified Constraint Satisfaction Problems (QCSP) have recently received increas- 
ing attention from the Artificial Intelligence community [Bordeaux and Monfroy 
2002; Borner et al. 2003; Chen 2004a; 2004b; Mamoulis and Stergiou 2004; Gent 
et al. 2004; Gent et al. 2005; Verger and Bessiere 2006; Benedetti et al. 2007; Bor- 
deaux and Zhang 2007]. A largo number of solvers arc now available for Quantified 
Boolean Formulae (QBF), which represent the particular case of QCSP where the 
domains are Boolean and the constraints are clauses, see e.g., [Buening et al. 1995; 
Cadoli et al. 1999; Cadoli et al. 2002; Rintancn 1999] for early papers on the sub- 
ject, and [Benedetti 2004; Zhang 2006; Samulowitz et al. 2006; Samulowitz and 
Bacchus 2006] for descriptions of state-of-the-art techniques for QBF. The reason 
behind this trend is that QCSP and QBF arc natm'al generalizations of CSP and 
SAT that allow to model a wide range of problems not directly expressible in these 
formalisms, and with applications in Artificial Intelligence and verification. 

1.2 Reasoning with Quantified Constraints 

Quantified constraints are typically much more difficult to reason with than classical 
constraints. To illustrate this difficulty, let us start by an example of property we 
would like to characterize formally, and let us suggest why a number of naive 
attempts to define this property are not suitable. Consider the formula: 

0: Vx e [3,10]. 3t/ e [1,15]. .r = y. 

We would like to "deduce" in a sense that y £ [1, 10] or, in other words, that the 
values [11, 15] are inconsistent for y. Such a property will in particular be useful 
to a search-based solver: if this inconsistency is revealed, then the solver can safely 
save some effort by skipping the branches corresponding to the values y G [11, 15]. 

A first attempt to define this notion of c;onsistency would be to use an implication 
and to say, for instance, that value a is consistent for ?/ iff </>—>■ (y = a). But there 
is clearly a problem with this approach since the occurrence of y on the right-hand- 
side of the implication is unrelated to its occurrences in formula 0, which fall under 
the scope of a quantifier. One may attempt to circumvent this problem by putting 
the implication under the scope of the quantifiers, and to say, for instance, that a 
is consistent for y iff Va; G [3, 10]. 3y G [1, 15]. {x = y) ^ {y = a). But with this 
definition any value would in fact be consistent, even y = 17. This is because for 
every x, we have a value for y that falsifies the left-hand side of the implication, 
thereby making the implication true. 

Another approach that looks tempting at first but is also incorrect is to say 
that a is inconsistent for y iff the formula obtained by fixing the domain of y to 
{a} is false. With this definition we would deduce that all values a G [1, 15] are 
inconsistent w.r.t. variable y, since the formula Va; G [3, 10]. 3y G [a,a]. x = y is false 
in each and every case. Other variants of these definitions can be considered, but 
one quickly gets convinced that there is simply no natural way to define consistency, 
or any other property like interchangeability, using implications or instantiations. 
To define these notions properly in the case of quantified constraints, we need a 
new framework, which is what this paper proposes. 
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1.3 Overview of our Contributions 

This paper shows that the definitions of consistency, substitutability, and a wider 
range of CSP properties can be generalized to quantified constraints. Note that all 
our definitions and results also hold for the particular case of Quantified Boolean 
Formulas. These definitions, presented in Section 3, are based on a simple game- 
theoretic framework and in particular on the new notion of outcome which we 
identiiy as a key to define and understand all QCSP properties. We then classify 
these properties in Section 4 by studying the relationships between them (e.g., 
some can be shown to be stronger than others). We investigate the simplifications 
allowed by these properties in Section 5, and we characterize the complexity of 
their associated decision problem in Section 6. Since, as these complexity results 
show, determining whether any property holds is typically intractable in general, 
we investigate the use of the same tool which is used in classical CSP, namely local 
reasoning, and we propose in Section 7 local versions of these properties that can 
be decided in polynomial time. Concluding comments follow in Section 8. We start 
(Section 2) by introducing some material on QCSP. 

2. QUANTIFIED CONSTRAINT SATISFACTION PROBLEMS 

In this section, we present all the definitions related to QCSP, as well as some 
"game-theoretic" material. 

2.1 Definition of QCSP 

Let D be a finite set. Given a finite set V of variables, a T^-tuplc t with components 
in D, is a mapping that associates a value € ID) to every x GV; a. V -relation over 
P is a set of V-tuples with components in D. 

Definition 1. A Quantified Constraint Satisfaction Problem (QCSP) is a tuple 
(j) = {X, Q,D,C) where: X = {xi, . . . ,Xn} is a linearly ordered, finite set of vari- 
ables; Q associates to each variable Xi € X a quantifier Qx^ G {V, 3}; D associates 
to every variable Xi €: X & domain D^^ C D; and C = {ci, . . . Cm} is a finite set of 
constraints, each of which is a F-relation with components in D for some y C X. 

2.1.1 Notation 

— The notation W^^y^x, where F C X is a subset of variables, will denote a 
Cartesian product of domains, i.e., the set of F-tuples t that are such that tx € 
for each x & V. 

— The notation t[x := a], where t is an X-tuple, a; e X is a variable and a € ID is a 
value, will be used for instantiation, i.e., it denotes the tuple t' defined hy t'^ = a 
and t'y = ty for each y & X\ {x}. 

— The notation t\u, where t is a V-tuple and J7 C F is a subset of its variables, 
will denote the restriction of t to U, i.e., the [/-tuple t' such that t'^ = tx for each 
X gU. (Note that t is undefined on every y G y \ U.) 

We use the following shorthands to denote the set of existential (resp. universal) 
variables, the set of variables of index < j, and the sets of existential/universal 
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variables of index < j : 

Xj={xi &X\i<j} 
E = {xi e X I Qx* =3} Ej=E n Xj 
A = {xi&X \ Q^, =V} Aj=A n Xj 

2.1.2 Satisfaction, Solutions and Truth of a QCSP. Given a QCSP (f> = {X, Q, D, C) 
as in Definition 1, an X-tuple t is said to satisfy the set of constraints C iit\v G c 
for each F-relation c G C. The set of X-tuples satisfying all constraints of ^ is 
called the set of solutions to C and is denoted by sol*^. 

Although QCSPs are defined in a form that closely follows the traditional defini- 
tion of CSPs, the most immediate way to define their semantics is to use rudimen- 
tary logic with equality. (We shall sec in the next section that we can in a second 
step forget about the logic and think alternatively in terms of tuples and functions 
when this is more convenient.) A QCSP {X, Q, D, C) represents a logical formula 
whose vocabulary includes n names for the variables (for convenience, we simply 
denote these names as Xi . . . a;„) and m names for the constraints {ci . . .Cm)- The 
formula is defined as: 

GD^^ (Fi a---af„). 

where each Fi is obtained from the corresponding F-relation a: let {yi, .., yp} = V, 
then Fi is simply the formula Ci{yi, .., yp), i.e., we apply the name of the constraint 
to the right argument list. Each D^^ explicitly lists the values specified in the QCSP 
definition, for instance Vx e {a, h].(j) is a shorthand for Va;.(a; = a V x = 6) — > 

Let I be the interpretation function that associates to each constraint name the 
corresponding relation; the QCSP is said to be true if formula F is true in the 
domain D and w.r.t. the interpretation /, i.e., iff (ID, /) |= F. 

2.2 Game-Theoretic Material 

Quantifier alternation is best understood using an "adversarial" or "game-theoretic" 
viewpoint, where two players interact. One of them is allowed to choose the values 
for the existential variables, and its aim is to ultimately make the formula true, while 
the other assigns the universal variables and aims at falsifying it. We introduce 
several definitions leading to our central notion of outcome, which will be shown to 
shed light on the definition of properties in the next section. Our presentation of 
the basic game-theoretic material is inspired from [Chen 2004b], who uses a similar 
notion of winning strategy. 

The following QCSP (written using the usual, self-explanatory logical notation 
rather than in the form of a tuple {X, Q,D,C)) will be used to illustrate the notions 
throughout this sub-section: 

3xi e [1, 10]. Vx2 G [1, 10]. 3x3 G [1, 10]. ... 

Va;4 G [1,10]. 3x5 e [1,10]. xi X2 X3 X4 -h X5 = 30 ^' 

This formula can be thought of as a game between two players assigning, re- 
spectively, the odd and even variables. The players draw in turn between 1 and 
10 sticks from a heap containing originally 30 sticks; the player who takes the last 
stick wins. 
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2.2.1 Strategies. The first notion we need is the notion of strategy: 
Definition 2. A strategy is a family {sxi | Xi S E} where each s^^ is a function 

of signature (jly^A^.i ^v) ^ ^^i- 

In other words, a strategy defines for each existential variable Xi a function that 
specifies which value to pick for Xi depending on the values assigned to the universal 
variables that precede it. Note in particular that, if the first k variables of the 
problem are quantified existentially, we have for every i < k a constant G D^^ 
which defines which value should directly be assigned to variable Xi. 

Example 1. A strategy for the QCSP (1) can he defined by s^^O — 8/ s^s 
associates to every {x2}-tuple t the value s^^^it) = 11 — and s^s associates to 
every {x2,X4 } -tuple t the value Sx^ {t) = 1 1 — tx^ ■ This strategy specifies that we first 
draw 8 sticks, then for the next moves we shall draw 11 minus what the opponent 
just drew. 

2.2.2 Scenarios. The tuple of values that will eventually be assigned to the 
variables of the problem depends on two things: 1) the strategy we have fixed 
a, priori, and 2) the sequence of choices of the "adversary", i.e., the values that 
are assigned to the universal variables. Given a particular strategy, a number of 
potential scenarios may therefore arise, depending on what the adversary will do. 
These scenarios are defined as follows: 

Definition 3. The set of scenarios of a strategy s for a QCSP (j), denoted sce'^{s), 
is the set of tuples t £ Ylxex such that, for each Xj € E, we have: 

tx, = Sx,{t\Ai_^) 

In other words, the values for the existential variables are determined by the 
strategy in function of the values assigned to the universal variables preceding it. 
There is no restriction, on the contrary, on the values assigned to universal variables: 
this reflects the fact that we model the viewpoint of the existential player, and the 
adversary may play whatever she wishes to play. 

Example 1 . ( Ctd.) An example of scenario for the strategy defined previously 

is the tuple defined by xi = 8, X2 = 4, 2:3 = 7, 2:4 = 1, 2:5 = 10. On the contrary, the 
tuple x\ = %,X2 = 4,3:3 = 7,a;4 = 1,0:5 = 5 is not a scenario since the value 5 for 
X5 does not respect what is specified by Sx^ ■ 

2.2.3 Winning Strategies. Of particular interest are the strategies whose sce- 
narios are all solutions. We call them winning strategies: 

Definition 4. A strategy s is a winning strategy for the QCSP (p if every scenario 
t £ sce'*(s) satisfies the constraints of (in other words: if sce*(s) C sol''^). 

We denote by WIN"^ the set of winning strategies of the QCSP (p. 

Example 1. (Ctd.) In the strategy s defined in Example 1, any scenario t is of 
the form xi = 8.X2 = a,.T3 = 11 — a,X4 = 6,2:5 = H — b. As a result the sum 
always evaluates to8 + a + ll — a + 6+11 — 6 = 30 and s is therefore a winning 
strategy. In fact, this strategy is the only winning one; one can check, for instance, 
that the strategy s' defined by s'^^{) = 7; s'^^{t) = 7 and s'^^{t) = 7 is not winning. 
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The following proposition is essential in that it justifies the use of the game- 
theoretic approach^: 

Proposition 1. A QCSP is true (as defined in Section 2.1.2) iff it has a win- 
ning strategy. 

2.2.4 Outcome. Whereas the preceding material is well-known and is used, for 
instance, in [Chen 2004b], we introduce the following new notion: 

Definition 5. The set of outcomes of a QCSP <h. denoted out"^, is the set of all 
scenarios of all its winning strategies, i.e., it is defined as: 

ouf^ = IJ sce'^(s) 

Example 1 . ( Ctd.) Since our example has a unique winning strategy it is easy 
to characterise its set of outcomes: these are all the tuples of the form xi = 8,X2 = 
a,X3 = 11 — a,X4 = b,X5 = 11 — 6, with a,b £ [1, 10]. 

Outcomes are related to the classical notion of solution in the following way: in 
general any outcome satisfies the set of constraints C, so we have out"^ C sol*^, and 
the equality ouf^ = sol"^ holds if all variables are existential. On the other hand 
let us emphasize the fact that not all solutions are necessarily outcomes in general: 
in our example the tuple xi = 6,X2 = 6, xs = Q,X4 = Q,X5 = 6 is for instance a 
solution as it satisfies the unique constraint (xi + X2 + X3 + X4 + X5 = 30). But 
there is no winning strategy whose set of scenarios includes this particular tuple, 
and it is therefore not an outcome. 

The notion of outcome is a generalization of the notion of solution that takes into 
account the quantifier prefix of the constraints. Our claim in the following is that 
outcomes play a role as central for QCSP as the notion of solution does in CSP, 
and that most definitions can he based on this notion. 

2.2.5 Summary of the notions and notations. To summarize, we have defined 3 
sets of tuples (sol"^: the set of solutions, sce.'^{s): the set of scenarios of strategy s, 
and out*^: the set of outcomes) and one set of strategies (WIN*^: the set of winning 
strategies). All the game-theoretic notions we have introduced are illustrated in 
Fig. 1, where we consider the QCSP represented by the logical formula: 

3x1 e [2, 3] Vx2 e [3, 4] 3x3 & [3, 6]. xi -|- X2 < X3. (2) 

And and or labels on the nodes correspond to universal and existential quantifiers, 
respectively. The solutions are all triples (xi,X2,X3) s.t. Xi + X2 < X3. The only 
two winning strategies assign xi to 2: one (si) systematically assigns X3 to 6 while 
the 2nd one (S2) assigns it to X2 + 2 (note that each strategy is constrained to 
choose one unique branch for each existential node). The scenarios of si and S2 are 
therefore those indicated, while the set of outcomes of the QCSP is the union of 
the scenarios of s\ and S2 (also shown in bold line). 



^Proofs of all propositions can be found in the online Appendix A. 
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Fig. 1. A summary of the game-theoretic notions used in this paper. 

3. DEFINITIONS OF THE CSP PROPERTIES 
3.1 Informal Definitions of the Properties 

A major part of the CSP literature aims at identifying properties of particular 
values of some variables. The goal is typically to simplify the problem by ruling 

out the possibility that a variable Xi can be assigned to a value a. This can be done 
when one of the following properties holds, with respect to variable xf. 

— Value a is guaranteed not to participate in any solution: a is inconsistent for Xi 
[Mackworth 1977]. 

— Another value b can replace a in any solution involving it: a is substitutable to b 
for Xi [Frcuder 1991]. 

— All solutions involving a can use another value instead: a is removable for Xi 
[Bordeaux et al. 2004]. 

On the contrary, some other properties give an indication that instantiating Xi 
to a is a good idea: 

— All solutions assign value a to variable a;,: a is implied for Xi [Monasson et al. 

1999]; 

— We have the guarantee to find a solution with value a on Xi, if a solution exists 
at all: a is said to be fixable for Xi [Bordeaux et al. 2004] . 

While all the preceding are properties of particular values, related properties of 
variables are also of interest: 

— The value assigned to a variable Xi is forced to a unique possibility: Xi is deter- 
mined. 

— The value of variable Xi is a function of the values of other variables: Xi is 
dependent. 
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— Whether a tuple is a solution or not does not depend on the value assigned to 
variable irrelevant. 

In this section, we propose generalizations of the definitions of the main CSP 

properties to quantified constraints. For the sake of homogeneity, wc adopt the 
terminology used in the paper [Bordeaux et al. 2004] for the names of the properties. 

We adopt a predicate notation and write, e.g., p'^{xi, a) for the statement "value 
a has property p for variable Xi (in QCSP </>)". The superscript (j) will be omitted 
in order to simplify the notation whenever there is no ambiguity regarding which 
QCSP is considered. 

We present our definitions in two steps: Section 3.2 introduces the basic defini- 
tions, which we call deep definitions, for reasons that will become clear in the rest 
of this section. We then notice in Section 3.3 that the properties can be made more 
general, leading to our shallow definitions. 

3.2 Basic Definitions 

The first definitions wc propose arc identified by a d prefix and qualified as "deep" 
when an ambiguity with the definitions in forthcoming Section 3.3 is possible. They 
are based on directly rephrasing the original CSP definitions, but using the notion 
of outcomes in place of solutions: 

Definition 6. We define the properties of inconsistency, implication, deep fixabil- 
ity, deep substitutability, deep removability, deep interchangeability, determinacy, 
deep irrelevance and dependency, as follows, for all Xi & X , a,b £ Dx^, V C X: 

inconsistent{xi , a) 
implied{xi, a) 

d-fixable{xi, a) 

d-substitutable{xi, a, b) 

d-removable{xi, a) 

d-interchangeable{xi, a, b) 

deter mined{xi) 
d-irrelevant{xi) 

dependent{V, Xi) 

We note that the definition of consistency is equivalent to the one proposed in 
[Bordeaux and Monfroy 2002]; it is nevertheless expressed in a simpler and more 
elegant way that avoids explicitly dealing with And/Or trees. All other definitions 
are new. 

Example 2. Consider the QCSP: 

3xi G [2,3] yx2 G [3,4] 3x3 G [3,6]. xi + X2 < xa 
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G out. txi 7^ a 
Vf G out. txi = a 

Vf G out. t[xi := a] G out 

Vt e out. {tooi = a) ^ {t[xi := b] e out) 

Vi G out. {txi =a) —>■ (36 ^ a. t[xi := b] G out) 

d-substitutable{xi,a, b) A d-substitutable{xi, b, a) 

Vt G out. Mb^txi- t{xi := b\ ^ onX 
Mt G out. Mb G -Dxi- A^i '■= b] G out 

Vf,i' Gout. {t\v=t'\v) ^ (ic.. =t') 
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(cf. Fig. 1). We have: inconsistent{xi,3), inconsistent{x3,3), inconsistent{x3,4:), 
d-substitutable{xs,5,6), d-Sxable{xs,6), d-removable{xs,5), and inipUed{xi,2). 

A choice we made in Definition 6 requires a justification: if we consider, for 
instance, fixability, one may think that a more general definition could be obtained 
if we wrote G out. t[xi := a] G soj instead of Vt G out. t[xi := a] G out. Similarly, 
the question arises whether the other definitions that involve the set out in the right- 
hand side of an implication (cither implicitly or explicitly) could be strengthened 
be using the set sol instead. This is not the case: except for one property, namely 
determinacy, the modified definitions would actually be strictly equivalent: 

Proposition 2. Deep fixability could equivalently be defined by the condition 
yt G out.t[xi :— a] G sol; Deep substitutability could be equivalently defined by 
yt G out. {txi = a) ^ {t[xi := b] G sol); deep removability by \/t G out.{tx. = a) ^ 
(36 7^ a.t[xi := b] G sol); and deep irrelevance by \lt G outMb G D^... t[xi := b\ G sol. 

This proposition will play a role in the proof of other results. Defining determi- 
nacy by G out.V6 ^ txi.t[xi := b] ^ sol, instead of the definition we used, i.e., 
G out.V6 7^ txi.t[xi :— b] ^ out, would on the contrary give a slightly different 
notion: we note that in this case (because of the negation implicitly on the right- 
hand side of the implication, i.e., t[xi := b] ^ out), the definition would become 
weaker. For instance, in Fig. 1, we would not have determiiied(a:i, 2) because the 
tuple t = (2, 3, 6) is such that t[xi := 3] G sol. 

3.3 Generalization: Shallow Definitions 

The previous definitions are correct in a sense that will be made formal in Section 5. 
They are nevertheless overly restrictive in some cases, as the following example 
shows: 

Example 3. Consider the QCSP: 

Vxi G [1,2] 3x2 e [3,4] e [4,6]. xi+X2 = x^,. 

The winning strategies can make arbitrary choices for X2 as long as they set Xz 
to the value x\ + X2, and the outcomes are the triples (1,3,4), (1,4,5), (2,3,5), 
(2,4,6). Note that for variable X2, neither values 3 nor 4 o,re deep-fixable, and 
none is deep-substitutable to the other. This somehow goes against the intuition 
that we are indeed free to choose the value for X2 . 

The reason why our previous definition did not capture this case is that it takes 
into account the values of the variables occurring after the considered variable: 
values 3 and 4 are interchangeable (for instance) only if the QCSPs resulting from 
these instantiations can be solved using the same strategy for all the subsequent 
choices — this is why we called these definitions deep (with a d prefix). On the 
contrary, we can formulate shallow definitions of the properties, which accept value 
4 as a valid substitute for 3 because in any sequence of choices leading to the 
possibility of choosing 3 for X2, value 4 is also a valid option. 

Definition 7. We define the properties of shallow fixability, substitutability, re- 
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movability, interchangcability, and irrelevance, as follows: 

s-Exable{xi, a) = 

e out. 3t' e out. ( t\xi_i = t'\xi_i A t'^.=a) 

s-substitutable{xi, a, b) = 
Mt e out. tx = a ^ 

3t'Gout. =i'k_J A =6)) 

s-reinovable{xi , a) = 
\/t G out. — a 

Bt'Gout. {t\x,_,=t'\x,_,At',^y^a) 

s-interchangeable{xi,a,b) = 

s-substitutable{xi, a, b) A s-substitutable{xi, b, a) 

s-irrclcvant{xi) = 

G out. V6 G Dxi- 

3t' G out. ( {t\x,_, = t'k.-i) A (^L. = b) ) 

One can check that with these definitions we handle Example 3 as expected: 
Example 3. (Ctd.) Considering again the QCSP: 

Mxi G [1, 2] 3x2 e [3, 4] 3x3, G [4, &\.xi+X2= x^, 

values 3 and 4 O'fe shallow-interchangeable for variable X2 (both values are also 

shallow- fixable, shallow-removable, and variable X2 is in fact shallow-irrelevant). 
The reason is that for each outcome t that assigns value 3 to X2, there exists a tuple 
t' such that t'x^ = txi and t'^^ =4 (to t = (1,3,4) corresponds t' = (1,4,5); to 
(2,3,5) corresponds (2,4, 6) j, and vice-versa. 

This can be seen pictorially in Fig. 2. On the left-hand side, we see why values 3 
and 4 are not (for instance) deep-interchangeable for X2: the outcomes (branches) 
going through these values are indeed different. Now on the right-hand side we 
see the viewpoint of the shallow definitions: the strategy is only considered up to 
variable X2, and it is clear, then, that values 3 and 4 are interchangeable. 

We last remark that the distinction we have introduced between deep and shallow 

only makes sense for a subset of the properties. It is easy to sec, for instance, that a 
shallow definition of inconsistency would make no difference: this notion is defined 
by the statement G out. t^i ^ a, and this is equivalent to G out. {t\xi)xi a. 

4. RELATIONS BETWEEN THE PROPERTIES 

This section gives a number of results establishing the relations between the classes 
of properties (e.g., deep, shallow) and between the properties themselves (substi- 
tutability, determinacy, etc.). These results will also be used later (Section 5) to 
prove that our definitions are useful, in that they allow to simplify the considered 
QCSP while preserving some form of equivalence. 
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Fig. 2. Illustration of the notion of shallow properties, as opposed to the deep definitions. 
4.1 Relations between Classes of Properties 

The basic relations between classical, deep, and shallow definitions, are the follow- 
ing: deep definitions arc more general than basic, existential ones, and the shallow 
definitions are more general than the deep ones, in a sense that is explained formally 
in the following. 

4.1.1 Deep definitions vs. classical definitions. We first note that, in the par- 
ticiilar case where the quantifiers are all existential, the deep definitions of the 
properties (Definition 6) correspond to the classical CSP notions, simply because 
we have out = sol in that case; in other words our definitions truly are general- 
izations of the classical definitions. In the general case, when the quantifiers arc 
not restricted to be existential, we can still ignore the quantifier prefix and apply 
the classical definitions to the resulting existentially quantified CSP. The relations 
between the original QCSP and the relaxed CSP are the following: 

(1) The deductions made using the classical definitions are correct: a property 
detected on the existentially quantified CSP, using the classical definitions, will 
also hold for the QCSP. 

(2) This reasoning is incomplete: if we do not take into account the quantifier prefix 
as our new definitions do, some properties cannot be detected. 

The correctness can be stated formally as follows: 

Proposition 3. Let </> = {X,Q,D,C) be a QCSP and let ip he the same QCSP 
hut in which all quantifiers are existential, i.e., tp = {X,Q',D,C), with Q'^ = 3, 
for all X £ X. We have (forall Xi, a, b,V): 

— inconsistent^ (xi, a) — > inconsistent'^ {xi, a); 

— d-Gxable^ (xi, a) —>■ d-Gxable'^{xi,a); 

— d-substitutable^{xi,a,b) — » d-substitutable'^{xi,a,b); 

— d-reniovable^{xi,a) d-reniovable'^{xi,a); 

— d-interchangeable^{xi,a,b) — > d-interchangeable^{xi,a, h); 

— determined^ {xi) determined'^ (xi); 

— d-irrelevant^ (xi) d-irrelevant'^ (xi) ; 

— dependent^ {V, Xi) — *■ dependent'^ (V, a;,). 
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We note that the idea of relaxing universal quantifiers and approximating a QCSP 
by a classical, existential CSP, has been considered implicitly by several authors: 
the solver presented in [Bcncdctti ct al. 2007] is built on top of a classical CP 
solver and its propagation mechanism essentially relies on the classical notion of 
inconsistency; other authors [Mamoulis and Stergiou 2004; Gent et al. 2005] have 
investigated the use of substitutability in QCSP; here again the notion they have 
used was essentially the classical, existential one. 

Replacing a universal quantifier by an existential one is but one way to obtain 
a relaxation of a QCSP. In [Ferguson and O'SuUivan 2007], a more comprehensive 
list of relaxation techniques is studied. Interestingly this work essentially defines a 
relaxation as a transformation that guarantees that if the relaxation is false, then 
so is the original problem. In other words, the notion of relaxation is based on the 
truth of the QCSP. Proposition 3 shows that quantifier relaxation provides a way 
to do approximate reasoning on other properties than truth. 

The incompleteness of the reasoning on the existential relaxation is easily seen 
on an example: 

Example 2. (Ctd.) Consider the QCSP: 

3x1 e [2,3] Vx2 G [3,4] 3x3 e [3,6]. xi + X2 < xs 

(See Fig. 1.) Noticeable properties are: inconsistent{xi,3), implied{xi,2), 
d-fixablc{xi,2), d-removable{xi,3), d-substitutable{xi,3,2), deterniined{xi) . 

On the contrary if we apply the classical definition or, equivalently, consider the 
CSP3x\ e [2,3] 3x2 e [3,4] 3x3 € [3,6]. x\-\-X2 < xs, none of the properties holds, 
because of the tuple (3,3,6). 

This confirms that the properties we have defined are new notions which do make 
a difference compared to classical CSP notions, and which allow a finer reasoning 
taking into account the quantifier prefix as well as the constraints themselves. 

4.1.2 Shallow properties vs. deep properties. To complete the picture, we have 
the following relations between deep and shallow notions (the deep ones are more 
restrictive): 

Proposition 4. For all variables Xi and values a and b, we have: 

— d-Gxable{xi,a) — > s-fixable{xi,a); 

— d-reniovable{xi, a) s-removable{xi, a); 

— d-substitutable{xi,a, b) ^ s-substitutable{xi, a, b); 

— d-interchangeable{xi,a, b) s-interchangeable{xi, a, b); 

— d-irrelevant{xi) — > s-irrelevant{xi). 

Note that whether a property holds is always dependent on the quantification 
order. In the case of shallow definitions, this is even more true, because the ordering 
matters even within a block of variables of the same nature, for instance when the 
quantifiers are all existential. To see that, consider the QCSP: 

3xi e [1,2] 3x2 G [3,4] 3x3 G [4,6]. xi+X2= X3. 
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Value 1 is shallow-substitutable to 2 for xi, and xi is shallow-irrelevant, while 1 
is not deep-substitutable to 2 for xi (i.e., substitutable in the classical sense), nor 
is xi deep- irrelevant. The intuition behind this is that here we consider that xi is 
assigned first, and at this step the two choices are equivalent. In other words, the 
property holds because we are considering the ordering xi,X2,X3. 

Interestingly, shallow properties, and shallow substitutability in particular, pro- 
vide a new, general form of properties even for the case of classical CSP. These 
properties are more general because they take into account information on a partic- 
ular variable ordering. An interesting question is to determine the variable ordering 
that allows to detect the highest number of substitutability properties in a given 
CSP. 

4.2 Relations between Properties 

As in the classical case [Bordeaux et al. 2004], we also have relations between the 

properties, for instance a value that is implied is also deep-fixable (and therefore also 
shallow fixable); a variable that is (deep/shallow) irrelevant is also (deep/shallow) 
fixable to any value, etc. We list the most remarkable of these relations in the next 
proposition: 

Proposition 5. The following relations hold between the properties (forall Xi, 

a and b): 

— inconsistent{xi, a) -^\/b G Dx^- d-substitutable{xi, a,b) ; 
— impUed{xi, o) <-> V6 e Dr^ \ {a}. inconsistent{xi, b); 
— implied{xi,a) d-Gxable{xi,a); 

— inconsistcnt{xi, a) d-rcmovablc{xi,a); 

— 36 e \ {a}. d-substitutable{xi,a, b) d-removablc(xi, a); 
— 36 G \ {a}. s-substitutable{xi, a, 6) s-reinovable{xi,a); 
— d-fixable{xi, 6) Vo € D^,.. d-substitutable{xi, a, 6); 

— s-Hxable{xi,b) ^ Va e D^.. s-substitutable{xi,a,b); 
— d-irrelevant{xi) Va G Dx^- d-Gxablc{xi,a); 
— s-irrelevant{xi) ^ Va G Dx^- s-B.xable{xi,a). 

5. SIMPLIFICATIONS ALLOWED WHEN THE PROPERTIES HOLD 

The goal of reasoning on the properties of a QCSP is typically to simplify the 
problem. In the cases we are interested in, this can be done in two ways: (1) by 
removing an element from the list of values to consider for one of the variables, or 
(2) by instantiating a variable to a particular value. Such simplifications arc helpful 
for backtrack search algorithms, which are typically considered when solving QCSP. 

We now show that the properties we defined allow simplifications that are correct, 
in the sense that they do not alter the truth of the QCSP: 

— If a value is removable for a given variable, then removing the value from the 
domain of that variable does not change the truth of the problem. 

— If a value is fixable to a particular value for a given variable, then instantiating 
the variable to this value does not change the truth of the problem. 
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The interest of the other properties hes essentially in their relation with the two 
fundamental properties of removability and fixability, as expressed by Prop. 5. For 
instance, an implied value is of interest essentially because it is fixable, and an 
irrelevant variable is of interest essentially because it is fixable to any value of its 
domain. Similarly, the interest of, e.g., inconsistent and substitutable values is that 
they are removable. We therefore focus on proving the correctness of the two notions 
of removability and fixability, and we will consider their shallow forms: recall that, 
by Prop. 4, the shallow are the stronger ones; a value which is deep-removable or 
deep-fixable is also shallow-removable or shallow-fixable, respectively. 

5.1 Simplifying Existental Variables 

Our whole game-theoretic approach is naturally biased towards existential variables: 
the notion of strategy considers that the values for the universal variables can be 
arbitrary, and specifies the values that should be taken for the existential ones. As 
a consequence, the approach is more naturally fitted to make deductions on the 
existential variables, and we first focus on this case. 

The simplifications allowed for an existential variable when the removability prop- 
erty holds rely on the following Proposition: 

Proposition 6. Let <j) = {X,Q,D,C) be a QCSP in which value a G D^^ is 
shallow-removable for an existential variable Xi, and let (j)' denote the same QCSP in 
which value a is effectively removed (i.e., (j)' — {X, Q, D', C) where D'^. = D^. \ {a} 
and D'^. = D^j^j i). Then (j) is true iff (j)' is true. 

The simplifications allowed for an existential variable when the fixability property 
holds rely on the following Proposition: 

Proposition 7. Let = {X, Q, D, C) be a QCSP in which value a G D^, is 
shallow-fixable for an existential variable Xi, and let </>' denote the same QCSP in 
which value a is effectively fixed (i.e., (p' = {X,Q,D',C) where D'^. = {a} and 
D'^. = Dx^,Vj ^^i). Then cp is true iff (j)' is true. 

5.2 Simplifying Universal Variables 

To allow a proper, symmetric treatment of all variables of QCSPs it is necessary 
to also define how to make deductions on universal variables. The way this can 
be done has been suggested by several authors in the literature and is developed, 
for instance, in [Bordeaux and Zhang 2007]: to make deductions on the imiversal 
variables, which represent the "moves of the opponent" , we have to reason on the 
negation of the formula, which captures the "winning strategies of the opponent" . 

We say that a value is dwaZ-shallow-rcmovable if it is shallow-removable in the 
negation of the considered QCSP, and that it is dwaZ-shallow-fixable if it is shallow- 
fixable in this negation. The simplifications allowed for a universal variable when 
the removability property holds rely on the following Proposition: 

Proposition 8. Let 4> = {X,Q,D,C) be a QCSP in which value a G D^^ is 
dual- shallow-removable for a universal variable Xi, and let 4>' denote the same QCSP 
in which value a is effectively removed (i.e., (j)' = {X,Q,D',C) where D'^. — \ 
{a} and D'^. = Dxj,Vj ^^i). Then (j) is true iff cp' is true. 
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The simplifications allowed for a universal variable when the fixability property 
holds rely on the following Proposition: 

Proposition 9. Let 4> = {X,Q,D,C) be a QCSP in which value a e -D^i is 
dual- shallow- fixaMe for an universal variable Xi, and let </>' denote the same QCSP 
in which value a is effectively fixed (i.e., 0' = {X,Q,D',C) where D'^, = {a} and 
D'^. = , Vj i). Then 4> is true iff (j)' is true. 

6. COMPLEXITY RESULTS 

In this section, we study the complexity of the problem of determining whether 
the properties defined in Definitions 6 and 7 hold. As was to be expected, our 
results show that the problem is in general intractable, and we essentially obtain 
PSPACE-completeness results. In other words the complexity of checking one of 
the properties is typically the same as the complexity of determining whether the 
QCSP is true [Papadimitriou 1994; Stockmeyer and Meyer 1973]. 

6.1 Encoding Issues 

To analyze the complexity, a few words are needed on the encoding of the QCSP 
{X,Q,D,C). Def. 1 did not specify anything on this issue, because the encoding 
did not have any consequence on the results of previous sections. Wo assume that 
X and Q are encoded in the natural way, i.e., as a list. For the set of domains D, 
two choices may be considered: a domain can be encoded as a list of allowed values 
or as an interval, in which case its two bounds need to be encoded. Our results will 
hold independently of whether the interval or domain representation is chosen. The 
main question is how the constraints are defined. Some examples of representation 
formalisms are the following: 

I The domain is Boolean, i.e., B = {0, 1}, and C is defined as a Boolean circuit. 

II The domain is Boolean, i.e., B = {0, 1}, and C is put in Conjunctive Normal 
Form, i.e., it is a conjunction of clauses (disjunctions of literals, each of which 
is a variable or its negation). 

III C is a conjunction of constraints, each of which is represented in extension as 
a table (e.g., binary) which lists all tuples that are accepted. 

IV C is a conjunction of constraints, each of which is represented by a numerical 
(linear or polynomial) equality or inequality. 

V C is a polynomial-time program (written in any universal language, for instance 
the Turing machine) which, given a tuple t. determines whether t G sol. 

In all cases we impose the restriction that testing whether t € sol be feasible in 
polynomial time. The fifth encoding represents the most general possible encoding 
satisfying this restriction: we shall consider it when wo want to c;liock that a result 
holds for any encoding in which testing whether t € sol can be done in polynomial 
time. 

Using encoding (V) to capture the notion of "most general encoding" is therefore 
convenient, but an important point is that the 4 other formahsms are essentially as 
concise as formalism (V). If the domain is Boolean, then if sol can be represented 
by a program P (in the sense that P{t) = 1 iff f G sol) and if the execution of 
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P requires a meraory bounded by S and a time bounded by L, then the set sol 
can be also represented by a Boolean circuit of size polynomial in S, L, and the 
length of the text of the program P, using the technique used by Cook in proving 
that SAT is NP-complete. In other words, for Boolean domains, formalism (I) 
is as expressive as formalism (V). Now the relations between formalism (I) and 
formalisms (II) to (IV) are well-known: we can reduce a circuit to a CNF involving 
only clauses of size at most three (3CNF) by introducing existential variables, and 
it is straightforward to reduce a 3CNF to formalism (III) or formalism (IV). The 
complexities of our problems for (I) to (V) will therefore be equivalent except 
for minor refinements occurring at intermediate levels of the polynomial hierarchy 
(Prop 13), where introducing existential variables makes a little difference. 

6.2 A Common Upper Bound: PSPACE 

The most difficult side of our complexity characterizations is to prove membership 
in PSPACE. It is indeed not completely obvious at first that the properties we 
have studied can be verified in polynomial space. The key point is to notice that 
a polynomial space algorithm exists to recognize the set of outcomes. Considering 
representation (V), we have the following: 

Proposition 10. Let (j) = {X, Q, D, C) he a QCSP. Given a tuple t G Ylxex ^x, 
we denote by B the conjunetion of constraints: 



The QCSP ip = {X, Q,D,B\J C) is true iff t G ouf^. 

Note that S U C can be expressed concisely in formalism (V). The conjunction 
of constraints added in (3) makes sure that any winning strategy of V' contains t as 
a scenario. 

A direct corollary of Prop. 10 is that checking whether a particular tuple t 
belongs to the set of outcomes of a QCSP (j) can be done in polynomial space, 
simply by solving %l>. This is true for any representation of the constraints that 
respects the restriction that testing whether t G sol be feasible in polynomial time^. 
Now being able to test in polynomial space whether a tuple is an outcome, the 
membership in PSPACE of all properties becomes clear: for instance if we consider 
inconsistency (Vt G out. tx^ / n) we can enumerate all tuples in lexicographical 
order, determine whether each of them is an outcome, and whether it satisfies 
the implication t G out. t^^ 7^ a. The precise list of results will be given in the 
next section, where we state completeness results (including both hardness and 
membership for the considered class). 

Example 4. Let us illustrate the idea of Prop. 10 on a simple example. Con- 
sider the QCSP 3xi. \ly\. 3x2- Vy2- 3x3. C, where the domain of each variable is, 
for instance {0, 1}. We want to determine whether the tuple {xi = 0,yi = 0,X2 = 



^In fact this condition could itself be considerably relaxed: the PSPACE membership result holds 
under the very general condition that testing whether t 6 sol be feasible in polynomial space. 




(3) 
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0, 2/2 = 0, = 0) is an outcome of the QCSP. This can be done by solving the 
QCSP in which the constraints of (3) are added: 

3a;i.Vyi.3a;2.Vy2.3a;3. CA(a;i = OA(j/i =Q^X2= 0)A{{yi = OAt/2 = 0) ^ a;3 = 0)). 

It might be useful to mention a possible source of confusion: it is the case that 

our PSPACE membership results hold for formalism (4), since it respects our re- 
striction. This is true even if the domains are represented by intervals; even 
though an interval whose bounds are n-bit integers represents in general a set of 
values of cardinality exponential in n, we can always iterate on these values using 
polynomial space. This should be contrasted with classical complexity results re- 
lated to arithmetics: in general deciding the truth of quantified linear constraints 
is extremely complex (hard for NDTIME(2^ ) by the Fischer- Rabin theorem [Fis- 
cher and Rabin 1974], and therefore provably not in PSPACE C EXPTIME), and 
if we consider quantified polynomial constraints the problem becomes undecidable 
(Godel's theorem). The key point is that in these cases the values of the variables 
can grow extremely large; as long as we bound the domains explicitly this problem 
does not arise, which is why we remain within PSPACE. 

6.3 Complexity Characterizations 

We now list the complexity results we obtain. These results hold for any of the 5 
representations we have mentioned. 

Proposition 11. Given a QCSP 4> = {X,Q,D,C), the problems of deciding 

whether: 

— value a G D^^ is d-Hxable, d-removable, inconsistent, implied for variable Xj G 
X, 

— value a G is d-substitutable to or d-interchangeable with b G D^^ for variable 

e X, 

— variable Xi G X is dependent on variables V C X , or is d-irrelevant 
are PSPACE-complete. 

An analogous result holds for the shallow properties: 

Proposition 12. Given a QCSP 4> = {X,Q,D,C) , the problems of deciding 
whether: 

— value a G is s-Bxable, s-removable for variable a;, e X, 
— value a G is s-substitutable to or s-interchangeable with b G for variable 
Xi G X, 

— variable Xi G X is s-irrelevant 

are PSPACE-complete. 

As usual when considering quantified constraints, the complexity increases with 
the number of quantifier alternations, more precisely each additional alternation 
brings us one level higher in the Polynomial Hierarchy [Stockmeyer 1976]. The 
precise level that is reached is dependent on the considered property and on many 
details, including the formalism used for the encoding of the QCSP. We shall not 
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list all results but instead we characterize, as an example, the complexity obtained 
in a particular setting, i.e., for the "deep" definitions of the properties, in the case 
where the QCSP starts with an existential quantifiers, and where its constraints 
are encoded as a Boolean circuit. 

We call SfcQCSPs the QCSPs with at most k quantifier alternations and whose 
first variables are existential. We have the following results: 

Proposition 13. Given a QCSP (j) = {X, Q, D, C) encoded using Formalism 
(I), the problems of deciding whether: 

— value a e D^. is deep-Bxable, deep-removable, inconsistent, implied for variable 

Xi e X, 

— value a G is deep-substitutable to or deep-interchangeable with b G for 

variable Xi X , 

— variable Xi Cz X is dependent on variables V <^ X , or is deep-irrelevant, 

are Il^-hard and belong to ^^^i- Moreover, for deep inconsistency, implication, 
determinacy and dependence, the problems are more precisely W^j.- complete. 

In particular, it was reported in [Bordeaux et al. 2004] that these problems are 
coNP-complete for purely existential QCSPs. 

Why the precise results are less regular than in previous cases is because the 
precise number of quantifier alternations is impacted by many factors. For instance, 
if we consider a Quantified Boolean Formula 3X. Vy. F{X, Y), where X and Y are 
vectors of Boolean variables and F is a Boolean circuit, then putting F into CNF 
will produce a formula of the form 3X. VF. 3Z. G(X,Y, Z), and this sometimes 
incurs a difference of one level in the polynomial hierarchy between Formalism 
(1) and Formalisms (II) to (IV). Similarly, there is a difference between shallow 
and deep properties in that shallow properties are themselves usually stated with 
more quantifier alternations, a typical form being "forall outcomes, there exists an 
outcome" . What is obviously true for all properties in any case, however, is if we 
consider QCSPs with a limited number of quantifier alternations, the level reached 
in the polynomial hierarchy is also bounded. 

7. LOCAL REASONING 

The previous section shows that all of the properties we are interested in are com- 
putationally difficult to detect in fact as difficult as the resolution of the QCSP 
problem itself. There are nonetheless particular cases where a property can be 
cheaply revealed. In CSP solvers the most widely used way of detecting properties 
cheaply is by using local reasoning: instead of analysing the whole problem at once, 
thereby facing its full complexity, we analyse it bit by bit (typically constraint by 
constraint). Depending on the property we know how deductions made on the bits 
generalize to the whole QCSP. For instance: 

— In the c;ase of inconsistency, a deduction made on one single constraint generalizes 
to the whole CSP. For instance, if we have a CSP 3a; e [0,5]. y G [0,5]. x > y AC, 
we can deduce from the constraint x > y that value is inconsistent for x, without 
having to worry of which other constraints are present in C. 
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— In the case of substitutability, a deduction is valid for the whole QCSP if it can 
be checked independently for each and every constraint. For instance if we have 
the CSP 3x e [0, 5]. y G [0, 5]. a; > 1 A a; < y, wc can deduce that value value 3 
is substitutable to 2 for x. This is the case because the substitutability property 
holds for both constraints a; > 1 and x < y. If, however, there were a third con- 
straint, wc would have to make sure that the property holds for it as well before 
deducing that it holds for the whole CSP. The situation is slightly less advanta- 
geous than for inconsistency because we have to consider each constraint before 
making a deduction, but it is nevertheless of interest — analysing the constraints 
one by one is typically much cheaper than analysing the whole CSP at once. 

Following the classical CSP approach, we investigate the use of local reasoning 
as a means to cheaply detect the properties we have proposed. 

7.1 Positive Results 

Our first result is that using local reasoning allows to detect the deep properties ex- 
cept removability. Depending on the property one of the two forms of generalization 
mentioned before is correct. 

Proposition 14. Let cj) = {X,Q,D,C) be a QCSP where C = {ci,...,Cm}. 
We denote by (pk the QCSP {X,Q,D,{ck}) in which only the k-th constraint is 
considered. We have, for all Xi G X , V C X , and a,b £ D^^ : 





^ inconsistent'^'' {xi , a) 


) inconsistent'^ {xi, a); 


-(V.ei. 


^ implied'^'' {xi,a) ) 


implied'^ {xi, a); 


-(Afcei. 


^ d-Bxable'^'' {xi,a) ) - 


* d-Gxable'^{xi,a); 


-(Afcei. 


^ d-substitutable'^'' {xi , 


a,b)) d-substitutable'^{xi,a, b); 


-(Afcgi. 


^ d-interchangcablc'^'' ( 


Xi,a,b)) — > d-interchangeable'^ {xi, 


-(V.ei. 


^ determined'^'' (xi)) - 


-» determined'^ (xi) ; 


-(Afeei. 


^ d-irrelevant'^'' (xi)) - 


d-irrelevant'^ (xi) ; 


-(Vfcei. 


^ dependent'^'' {V, Xi) ) 


— > dependent'^ (V, Xi) . 



7.2 Negative Results 

It was noticed in [Bordeaux et al. 2004] that, even in the non-quantified case, deep 
removability is not as well-behaved as the other deep properties since it is not 
possible to detect it using local reasoning. This was seen on an example, which we 
borrow from this paper: 

Example 5. Consider the CSP 

3x e {1,2,3}. 3y E {1,2,3}. {x < y,y < x,x^ l,x^ 3) 

// we consider each of the four constraints, then we find that value 2 is removable 
for X. But obviously value 2 is not removable for the CSP as the only solution is 
indeed x = 2,y = 2. 
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A similar problem occurs when we consider the shallow definitions: it is incorrect, 
in general, to use local reasoning to detect these versions of the properties^. Here 
again this can be seen on a simple example: 

Example 6. Consider the (Q)CSP 

3xi e {0, 1}. 3x2 e {0, 1}. {xi = X2 Ax2 = l) 

It is the case that variable x\ is shallow-fixable to value w.r.t. constraint xi = X2; 
and variable xi is also shallow-fixable to value w.r.t. constraint X2 = 1. Despite 
of that, xi is not shallow-fixable to in the QCSP, as there is simply no solution 
with xi = 0. 

The shallow definitions therefore have to be considered carefully: they are more 
general than the deep properties, but they have to be detected by other means 
than local reasoning. This is somewhat reminiscent of what happens with the 
removability property, whose generality comes at the price of being a less well- 
behaved property than substitutability or inconsistency. 

8. CONCLUDING REMARKS 
8.1 Related Works 

A number of works related to Quantified CSP have considered particular cases of 
the properties we have attempted to study systematically in this paper. Most of 
these works have been mentioned throughout the paper, notably [Mamoulis and 
Stergiou 2004] for their use of substitutability; we also note the work done by Pe- 
ter Nightingale in his thesis, which devotes large parts to the consistency property 
[Nightingale 2005]. The notions considered in these works are related to our pro- 
posals but typically less general, because our definitions finely take into account the 
quantifiers. For substitutability for instance, the definition used in [Mamoulis and 
Stergiou 2004] was essentially the classical (existential) definition. For consistency, 
our definition subsumes the notions proposed by [Bordeaux and Monfroy 2002] or 
[Nightingale 2005]. Our general definition nevertheless leaves open the question 
of how to efiiciently detect inconsistent values, and these proposals can be seen as 
particular ways of using local reasoning to detect inconsistent values. This situation 
is quite closely related to works in CSP, where many notions of local consistency 
can be defined. These notions have different merits that can be evaluated experi- 
mentally, but they all share the basic property of being ways to detect (globally) 
inconsistent values, which explains why they arc correct. 

We also note that more advanced studies are available for the particular case of 
Boolean quantified constraints. In these works some techniques have been proposed 
that specifically take into account the quantifier prefix. However, contrary to ours, 
these proposals are restricted to Boolean domains. For instance in [Rintanen 1999; 
Cadoli et al. 2002] , several techniques are proposed to fix and remove values. These 
works have shown that detecting properties is essential and can lead to a consistent 
pruning of the search space, but no clear and general framework to understand 
these properties was available. 

■^This corrects an error in [Bordeaux et al. 2005], where we wrongly stated that local reasoning is 
valid for all properties. 
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An interesting, recent related work is [Audemard et al. 2007], which initiates 
the study of symmetries in Quantified Boolean Formulae. Symmetries are related 
to the notion of intcrchangcability but arc in a sense a more general concept. Our 
feeling is that the idea of using the notion of outcome to define constraint properties 
may be applicable to this class of properties as well. Symmetries are a complex 
and fascinating topic; an interesting perspective for future work will be to see if our 
framework can help understanding them in the general context of quantified CSP. 

8.2 Conclusion 

A primary goal of our work was to state the definitions in a way that is formal 
and amenable to proofs. In previous QCSP literature, it is fair to say that formal 
proofs were scarce, probably because facts that arc trivial to prove in CSP tend to 
become complex to write formally when quantifiers come into play. Quantifiers can 
be complex to reason with, and it is sometimes easy to make wrong assumptions 
on some properties, as wc saw ourselves when finding the error we made in the 
preliminary version of this paper (Section 6). Because of this difficulty, we wanted 
in this work to build solid foundations on which the deductions made in QCSP 
solvers can rely. 
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A. PROOFS OF THE MAIN PROPOSITIONS 

Proposition 1. A QCSP is true (as defined in Section 2.1.2) iff it has a win- 
ning strategy. 

Proof. Instead of proving this result from scratch we sketch its connection to 
classical logical results and simply note that the functions used in the definition 
of the notion of strategy are essentially Skolem functions: it is well-known that, 
starting from a formula Vxi . . . Xn-^y. F{xi, . . . a;„, y) with an existentially quanti- 
fied variable y, we can replace y by a function and obtain a second-order formula 
that is equivalent: 3/. Va;i . . . a;„. F{xi, . . . Xn, f{xi . . . a;„)). 

If the domain ID) is additionally fixed and each quantifier is bounded, i.e., if we 
have a formula of the form: Vxi S D^^ ...Va;„ G D^^.3y G Dy. F{xi, . . . Xn,y), 
then the formula is equivalent to: 

3/. Vxi e .. .Va;„ e D^^. (/(xi .. .a;„) G Dy A F{xi, . . .Xn, f{xi ...Xn))) 

and any interpretation I verifying: 

(D,/) \= \/xi €D^,...yx„ € D^^.(f{xi...Xn) €DyA F{ f{Xi...Xn))) 

is such that the function /(/) is of signature (^Ilrriefm x„} ^-Ci^ ^ 

Now given a QCSP, let F be its logical representation as defined in Section 2.1.2, 
and let F' be the Skolem normal form of F, obtained by iteratively applying the 
process described above, for all existential variables. The strategies of the QCSP are 
exactly the possible interpretations of the Skolem functions of F' . Furthermore, a 
strategy is winning (all outcomes are true) iff the first-order (universally quantified) 
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part of the formula is true. Consequently a winning strategy exists for the QCSP 
iff the model-checking problem (D, /) |= F' is true, i.e., iff the QCSP is true. □ 

Proposition 2. Deep fixability could equivalently be defined by the condition 
\/t G out.t[xi := a] £ sol; Deep substitutability could be equivalently defined by 
\/t S out. {txi = a) ^ (t[xi := b] € sol); deep removability by \/t € out.{txi = a) ^ 
(36 7^ a.t[xi := b] € sol); and deep irrelevance by Vt e out.Vb G D^i- t[xi := b] £ sol. 

Proof. We consider fixability and we prove that Vt G out. t[xi := a] G out holds 
iff V< G out. t[xi := a] G so| docs. The implication is straightforward (out C sol); 
we prove the <— implication. In the case where the QCSP is false (no winning 
strategy) the implication trivially holds, since out is then empty. Let us therefore 
prove it in the case where the QCSP is true. 

We assume that G out. t[xi := a] G sol. Let t G out; it is clear that the tuple 
t[xi := a] belongs to sol; we have to prove that t[xi := a] also belongs to out. For 
that purpose, wc exhibit a winning strategy s such that t[xi := a] G sce(,s). 

Let s' be a winning strategy such that t G sce(s'). Such a strategy exists since 
t is an outcome. The strategy s will be obtained by modifying s' so that all its 
outcomes assign value a to variable Xi. More formally, the functions s^^ are defined, 
for each Xj EE, as follows: 

— If j = i then s^j (r) = a, for each tuple r G Ilj/gA -i ^y '' 
— Otherwise s^j is simply defined as the function s'^. . 

One can now verify that sce(s) = {r[xj := a] : r G sce(s')}. Two consequences 
are t[xi := a] G sce(s), and sce(s) C sol, which show that s is a winning strategy 
such that t[xi := a] G sce(s). 

Similarly, for substitutability we can exhibit a strategy s in which every t G sce(s') 
such that txi = a is changed into the scenario t[xi := b]. 

For removability it is convenient to restate the property: removability holds if 
there exists a function / that associates to every X-tuple t a value f{t) a, and 
such that G out.{txi = a) ^ {t[xi := f{t)] G out). We can exhibit a strategy s in 
which every t G sce(s) such that tx^ = a is changed into the scenario t[xi := f{t)]. 

For irrelevance we can use the fact that a variable is irrelevant iff it can be fixed 
to any value of its domain (Prop. 5). □ 

Proposition 3. Let 4> = {X, Q, D, C) be a QCSP and let ip be the same QCSP 
but in which all quantifiers are existential, i.e., tp = {X,Q',D,C), with Q'x = 3, 
for all X G X. We have (forall Xi, a, b,V): 

— inconsistenf^ {xi, a) inconsistent'^ {xi, a); 

— d-fixable^{xi,a) — > d-&>cable^{xi,a); 

— d-substitutablc^ (xi, a,b) d-substitutable'^{xi,a,b); 

— d-removablc^ (xi, a) d-rcmovablc'^ (xi, a) ; 

— d-interchangeable^ {xi, a,b) d-intcrchangeable'^{xi,a,b); 

— determined^ (xi) — > determined'^ {xi) ; 

— d-irrelevant^ {xi) —>■ d-irrelevant'^ {xi) ; 

— dependent^ {V, Xi) —> dependent'^ {V, Xi) . 
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Proof. All the results rely essentially on the fact that out C sol. For the 
properties of inconsistency, implication, determinacy and dependence, the proof 
directly follows: classical inconsistency means that Vt G sol. tx^ ^ a, which im- 
plies the deep property G out. tx^ ^ a; classical determinacy means that 
Vt G sol. V6 7^ txi- t[xi := b] ^ sol, which implies Vt G out. V6 7^ tx^ t[xi := b] ^ sol, 
which implies the deep property Vt G out. V6 7^ tx^- t[xi := b] ^ out. The cases of 
implication and dependence are similar. 

For the other properties we additionally use Proposition 2: classical fixability 
means that Vt G sol. t[xi := a] G sol. This implies Vi G out. t[xi := a] G sol which, 
by Proposition 2, is equivalent to the deep property Vt G out. t[xi := a] G out. 
The cases of substitutability, removability, interchangeability and irrelevance are 
similar. □ 

Proposition 4. For all variables Xi and values a and b, we have: 

— d-Gxablc{xi, a) — ^ s-Gxahlc(xi, a); 

— c/-removaWe(xi , a) s-removable{xi,a); 

— d-substitutable{xi, a, b) — » s-substitutable{xi,a, b); 

— d-interchangeable{xi, a, b) — > s-interchangeable{xi, a, b); 

— d-irrelevant{xi) s-irrelevant{xi) . 

Proof. If deep fixability holds, i.e.. we have Vt G out. t[xi := a] G out, then for 
each t G out the tuple t' = t[xi := a] is such that t\xi_i = t'\xi-i A t'x. = a, and 
we therefore have Vt G out. 3t' G out. = t'\xi_i A t'x. = a), which means 

s-fixable{xi, a). The proof is similar for irrelevance. 

If deep removability holds, i.e., G out. {tx^ = a) — > (36 ^ a. t[xi := b] G out), 
then for each t G out such that txi = a, the tuple t' = t[xi := b] is such that 
t\xi-i = t'lxi^i A t'x. = b, and wc have s-rcmovablc{xi,a). The proof is similar for 
substitutability, which also uses a bounded quantification, and the result follows 
for interchangeability. □ 

Proposition 5. The following relations hold between the properties (forall Xi, 
a and b): 

(1) inconsistcnt{xi , a) ^ V6 G Dx^- d-substitutablc{xi, a,b); 

(2) implicd{xi, a) ^ V6 G Dx^ \ {a}. inconsistent{xi, b); 
{3) implicd{xi,a) ^ d-Gxable{xi,a); 

(4) inconsistent{xi, a) d-reniovable{xi,a); 

(5) Bb G Dxi \ {a}. d-substitAitablc{xi, a,b) — > d-rcmovablc{xi,a); 
{6) 3b G Dxi \ {a}. s-substitutable{xi, a, b) s-removable{xi, a); 

(7) d-iixable{xi, 6) <-*■ Va G Dx^- d-substitutable{xi, a, b); 

(8) s-&xable{xi,b) <r^\/a& Dxi- s-substitutable{xi,a,b); 

(9) d-irrelevant(xi) ^ Va G D^^. d-Gxablc{xi,a); 
{10) s-irrelevant{xi) Va G Dx^- s-Gxable{xi,a). 

Proof. (1) Assume inconsistency holds. If we consider an arbitrary t G out, then 
txi 7^ a, which falsifies the left side of the implication (i^,. = a) ^ {t[xi :— b] G out), 
for any b, and deep substitutability therefore holds. 
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(2) If value a, is implied for x^, i.e., G out. = a, then for every value b awe 
have Vt € out. t^i = b, i.e., b is inconsistent. If all values b^ a are inconsistent, 
i.e., Vi G out. tj;. ^ b, then any t e out is such that V6 7^ a. 7^ 6 and t^i € Dxii 
so = a i.e., a is implied. 

(3) If a is implied for Xi, then any t G out is such that t^i = a, and we therefore 
have t[xi := a] = t E out. 

(4) If a is inconsistent for Xi, i.e., G out. t^;; 7^ a, then the left-hand side of the 
implication {txi = a) ^ {3b ^ a. t[xi := 6] G out) is false for every t G out. 

(5) If a is deep-substitutable to a certain value b ^ a, then for every t G out 
verifying = a we have := b] G out. This imphes 36 ^ a. t[xi := b] G out. 

(6) If a is shallow-substitutable to a certain value b ^ a, then for every t G out 
verifying t^^ = a, we have 3t' G out. {{t\xi_i = t'\xi_i) A {t'^. = b)). This implies 
3f'Gout. {t\x^_,=t'\x,_, At'x^y^a). 

(7) If b is deep-fixable for Xi, i.e., G out. := 6] G out, then the right-hand 
side of the implication {tx^ = a) ^ {t[xi := b] G out) is true for all t G out. 

(8) If b is shallow-fixable for Xi i.e., V< G out. 3t' G out. {t\xi.i = t'\xi_i M'x. = b), 
then the right-hand side of the implication t^. = a — »• 3t' G out. {{t\xi_i = t'\xi_i)A 

i^'x ~ ^) ^'"^^ ^O'" ^ "-"J^- 

(9) If is deep-irrelevant, i.e., G out. Va G i'a;.. ^[xj := a] G out, then for any 

a G we have G out. t[xi := a] G out. 

(10) If Xi is shallow-irrelevant, i.e., Vt G out. Va G -Da;;. 3t' G out. = 
i'l^i-i) A (f^. = a), then for any a G we have G out. 3f' G out. {t\xi-i = 
i'k_iA4=a). □ 

Proposition 6. Let 4> = {X,Q,D,C) be a QCSP in which value a G Dxi is 

shallow-removable for an existential variable Xi, and let (j)' denote the same QCSP in 
which value a is effectively removed (i.e., 0' = (X, Q, D' , C) where D'^. = Dx^ \ {a} 
and D'^. = Dxj,yj ^ i). Then (j) is true iff (j)' is true. 

Proof. If cj)' has a winning strategy then the same strategy is also winning for 
(j)] having <j)' true therefore implies that is also true. 

On the other hand, assume that (f) has a winning strategy s^ . Since a G Dx^ is 
shallow-removable for Xj, we have: 

G out. txi=a^ 3t' G out. {t\xi.i = i'ki-i ^ 4^ ^ «■) 

We show that if s^ has a scenario t G sce(s^) such that txi = a, then we can "cor- 
rect" this and exhibit another winning strategy s whose scenarios are the same as 
those of except that all scenarios A such that X\xi_i = t\xi_i have been replaced 
by tuples t' with t'^. ^ a. (Intuitively we replace the "sub-tree" corresponding 
to the branch t\xi_i by a new branch which docs not involve the choice Xi = a 
anymore.) More precisely, every scenario t' G sce(s) will satisfy: 

-Iit'\x,_^^t\x,_, then f G sce(si). 
— If t'\xi_i = t\xi^i then t'^. ^ a. 

This will prove the result: in showing how to construct s we show that, starting 
from any winning strategy containing a number n > of "incorrect" scenarios 
t' with t'^. = a, we can always exhibit a winning strategy with at most n — 1 such 
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scenarios, and repeating the correction n times we construct a winning strategy in 
which no tuple t' is such that t'^. = a. 

Let us now sec how to construct s starting from ,s^. The outcome t G sce(,S"'^) 
that needs to be replaced is such that tx^ = a and, using the shallow removability 
property, we conclude that there exists another outcome G out such that 6\xi_i = 
t\xi^i /\0Xi 7^ a. This outcome belongs to at least one winning strategy. We choose 
one of these strategies, which we call s^. To define the new strategy s we must 
define the functions s^j > for each xj e E. These functions are defined as follows: 

— if j < i then s^j is defined as s}^. (e.g., we follow the strategy for the first 

variables, until variable Xi, excluded); 
— for the following variables, i.e., when j > i, we define the value of (r), for each 
T G YlyeA,^^ Dy, as follows: 
—if T|xi_i = then Sx^ir) = sI^.(t): 

—if T\xt_, i- tU._i, then s^^(t) = s\^{t)\ 

The proof is completed by checking that every scenario t' £ sce(s) satisfies the 

two desired properties: 

— If t'\xi_i 7^ t\xi-i then t' £ sce(s^), because, for each Xj G E, we have t'^. = 

Sx, (i'U,_i) = 4j(*'U,_i) in this case. 
— If t'lxi^x = t\x,_i then t'^, ^ a, because t'^. = Sxi{t'\Ai_i) = sl.{t'\Ai_i) = 

Furthermore, every t' G sce(s) with t'|xi_i = t\xi-i belongs to sce(s^), and s is 
therefore a winning strategy: sce(s) C (sce(s^) U sce(s^)) C out. □ 

Proposition 7. Let 4> = {X, Q, D, C) he a QCSP in which value a G Dxi is 
fixable for an existential variable Xi, and let 4>' denote the same QCSP in which 
value a is effectively fixed (i.e., </>' = {X,Q,D',C) where D'^. = {a} and D'^. = 
Dxj,'^j i^i)- Then is true iff (j)' is true. 

Proof. If (j)' has a winning strategy then the same strategy is also winning for 
(j)] having (/>' true therefore implies that 4) is also true. 

On the other hand suppose that (f) has a winning strategy s^ . That a G Dx^ is 
shallow-fixable for Xi means that we have: 

Mt G out. 3t' G out. = i'k.-i ^ t'xi = a) 

The proof is similar to the one already detailed for Prop. 6: we show that if 
has a scenario t G sce(s"'^) such that tx^ ^ a, then we can "correct" this and 
exhibit another winning strategy s whose scenarios are the same as those of 
except that all scenarios A such that X\xi-i = t\xi-i have been replaced by tuples 
t' with t'^. = a. More precisely, every scenario t' G sce(s) will satisfy: 

—If 7^ t\x,_, then t' G sce(si). 

— If t'\xi_i = t\xi_i then t'^. = a. 

This will prove the result: in showing how to construct s we show that, starting 
from any winning strategy containing a number n > of "incorrect" scenarios 
t' with t'^. ^ a, we can always exhibit a winning strategy with at most n — 1 such 
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scenarios. This shows that there exists a winning strategy in which no tuple t' is 
such that t'^. ^ a. 

Let us now sec how to construct s starting from . The outcome t G sce(s"'^) 
needs to be replaced. Using the shallow fixability property, we know that there 
exists another outcome 6 G out such that 0\xi_i = t\xi_i A = a. This outcome 
belongs to at least one winning strategy. We choose one of these strategies, which 
we call s^. To define the new strategy s we must define the functions Sx^, for each 
Xj e E. These functions are defined as follows: 

— if j < i then Sxj is defined as si., (e.g., we follow the strategy for the first 

variables, until variable Xi, excluded); 

— for the following variables, i.e., when j > i, we define the value of Sx^ (r), for each 
T e YlyGA,., Dy, as follows: 
—if r|x,_i = then Sx^{t) = sI^{t)] 

—if r|xi_i 7^ then s^^.(r) = 4^(t); 

The proof is completed by checking that every scenario t' G sce(s) satisfies the 

two desired properties: 

— If t'\xi_i / Axi-i then t' G sce(s-^), because, for each Xj G E, we have t'^. = 
Sa:,(i'U,_i) = 4j(^'U,-i) in this case. 



—If i'|x,_i = then t'^^ = a, because t'^. = Sx,{t'\Ai_i) = sl.{t'\A,_,) = 

= sI{0\a,_,) = ex, = a. 



Furthermore, every t' G sce(s) with = belongs to sce(s^), and s is 

therefore a winning strategy: sce(s) C (sce(s^) U sce(.s^)) C out. □ 

Proposition 8. Let cj) = {X,Q, D,C) be a QCSP in which value a G Dx^ is 
dual-shallow-removable for a universal variable xi, and let (p' denote the same QCSP 
in which value a is effectively removed (i.e., (j)' — {X,Q,D',C) where D'^. = Dx^ \ 
{a} and D'^. — Dxj,^] i= i). Then (p is true iff (j)' is true. 

Proof. Direct consequence of Prop. 6: the hypothesis is that the dual-shallow- 
removability holds, i.e., a is removable for Xi w.r.t. the negated QCSP ->^; then (j) 
is true iff ^(j) is false iff ^(f)' is false iff 0' is true. □ 

Proposition 9. Let (p = (X.Q.D.C) be a QCSP in which value a G Dx, is 
dual- shallow- fixable for an universal variable Xi, and let (j)' denote the same QCSP 
in which value a is effectively fixed (i.e., (j)' = {X,Q,D',C) where D'^. = {a} and 
D'^. = Dx^,yj ^i)- Then 4> is true iff ip' true. 

Proof. Direct consequence of Prop. 7: the hypothesis is that the dual-shallow- 
fixability holds, i.e., a is fixable for Xi w.r.t. the negated QCSP -^<p\ then cp is true 
iff -^(p is false iff -^cp' is false iff cp' is true. □ 

Proposition 10. Let cp ^ {X, Q, D, C) be a QCSP. Given a tuple t G Hxex 
we denote by B the conjunction of constraints: 
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The QCSP = {X, Q,D,B\J C) is true iff t e ou& . 

Proof. Assume that V' is true. Then it has a non empty set of winning strategies; 
let s be one of them, picked arbitrarily. Let t' be the scenario of s that is such that 
^'U = ^Ui i-C-j that assigns the same values as t on the universal variables. Because 
s is a winning strategy, t' is a solution, and it satisfies the constraint given by (4). 
A straightforward induction on the indices of the existential variables shows that t 
is indeed identical to t' , which implies t G out"^. 

Assume now that t € out*^, i.e., there exists a winning strategy s for </> such 
that t € sce(s). Every scenario t' G sce(s) satisfies C. Let us prove by case that 
each t' G sce(s) also satisfies B. If we consider the scenario t' which is such that 
t'\A = t\A, then this scenario is indeed t (a strategy defines a unique outcome for 
each assignment of the universal variables), which satisfies B. On the other hand, 
B is satisfied also if wc consider any tuple t' which is such that t'|A 7^ ^U- To see 
this, let j be the lowest index such that i'Uj_i 7^ iU^.i- Constraints of B with 
i < j are satisfied because t'\Ai_i = t\Ai_i', the others because the left-hand side 



therefore satisfies B A C, in other words this strategy is winning for ^. □ 

Proposition 11. Given a QCSP 4> = {X,Q,D,C), the problems of deciding 
whether: 

— value a G D^^ is d-Bxable, d-removable, inconsistent, implied for variable Xi € 



— value a e D^^ is d-substitutable to or d-interchangeable with b G for variable 

Xi e X, 

— variable Xi <E X is dependent on variables V C X, or is d-irrelevant, 

are PSPACE-complete. 

Proof, (membership in PSPACE) The membership in PSPACE relies essen- 
tially on Prop. 10 and its immediate consequence, mentioned in the main text, 
that testing whether t G out can be done in polynomial space. All properties hold 
iff some statement is verified for all t € out, so the idea is then to loop over each 
tuple t, determine whether it belongs to out and, if this is the case, check whether it 
satisfies the statement. For inconsistency we check whether t^. 7^ a. We return false 
as soon as we have a tuple t e out for which this is not the case. For implication we 
test whether tx^ = a and similarly return false if one tuple does not verify that. The 
same idea works for all properties: for fixability we test whether t[xi := a] S out; 
for substitutability we check whether {t^^ = a) ^ {t[xi := b] G out); for remov- 
ability we check whether {t^i — a) ^ (36 ^ a. t[xi := b] G out); for determinacy 
we check whether V6 txi- t[xi := b] ^ out; for irrelevance we check whether 
V6 G Dxi- t[xi := b] G out. For dependency we have to do a double loop in lexi- 
cographical order, check whether both tuples t, t' belong to out and, if, so, check 
whether (V.7: j G V. txj = t'xj) {txi = t'xi)- case, at the end of the loop, we 

return true if no counter-example to the property has been found. It is clear that 
these algorithms use polynomial space and return true iff the considered property 
holds. □ 



of the implications 




X 



ACM Transactions on Computational Logic, Vol. V, No. N, February 2008. 



App-8 • L. Bordeaux, M. Cadoli & T. Mancini 



Proof, (hardness for PSPACE) For all properties we reduce the problem of de- 
ciding whether a QCSP cj) = {X, Q, D, C) is false to the problem of testing whether 
the considered property holds. 

The reductions work as follows. For inconsistency we simply construct the 
QCSP V = U {x), Q', D', C}), where: 

— X is a fresh variable, i.e., x ^ X; 

— Q' is similar to Q except that the new variable x is quantified existentially, i.e., 

Q'y = Qyj Vy 7^ a; and Q',. = 3; 
— D' is similar to D except that the domain of the new variable a; is a singleton, 

i.e., D'y = Dy, Vy 7^ a; and D'^ = {a} for some arbitrary a. 

It is straightforward that (p has a winning strategy iff tp also does. Let us verify 
that (j) is false iff value a is inconsistent for variable x in tp: if is false then out"^ is 
empty, and so is out''', and then it is true that Vt G out''', a; if a is inconsistent 

for X intp then e out''', tj;. ^ a, but no outcome can assign a value different from 
a to variable Xi, hence out'' is empty and out"^ is also empty. 

The same reduction works directly for removability: (p is false iff a is removable 
from X in ip. 

For fixability, implication, substitutability, interchangeability and irrel- 
evance, the reduction is only slightly different; now we construct the QCSP: 

^ = (XU {x}, Q', £>', CU{x = 0}}) 

in which the new variable x is existential and ranges over {0,1}. Note that the 
constraint a; = can be expressed directly in each and every of our 5 formalisms. 
We can check that <p is false iff: 

— variable x is fixablc to value 1 in ip: if cp is false then out''^ is empty and so is 
out'' and we trivially have Vt € out''. t[x := 1] e out'''; if x is fixable to 1 in V 
then Vi e out'''. t[x := 1] G out''', but there is no t is such that t[x := 1] e out'' 
and out'' and out''' are empty. 

— value 1 is implied for variable x in tp: similarly to fixability we have out''' = iff 

yt G out'', u = 1. 

— value is substitutable to value 1 for variable x in ip (out''' = holds iff G 
out'', {tx = 0) ^ {t[x := 1] G out'')). 

— value is interchangeable with value 1 for variable x in ip: (out'' = holds iff 
G out'', {tx = 0) ^ {t[x := 1] G out'')). 

— variable x is irrelevant in tp: if G out''. V6 G {0,1}. t[x := b] G out'', then 
any t G out'' is in particular such that t[x := 1] G out'' so no such t exists and 
out'' = 0. (The other direction is trivial.) 

For determinacy and dependence, the reduction consists in constructing the 
QCSP tp = {X U {x},Q' , D' ,C}), in which the new variable x is existential and 
ranges over {0, 1}. 

We check that </> is false if x is determined in tp. Assume that G out''. V6 ^ 
tx- t[x := b] ^ out'', and let us consider an arbitrary t G out''. Its value on x is 
either or 1 (say 0). Then it is such that t[x := 1] out''. Because values and 
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1 play a symmetric role, this cannot be, and ouf^ = 0. (The other implication is 
trivial.) 

We last check that (j) is false if variable x is dependent on the set of variables 
X in ■0. Assume that Vf, G out. {t\x = t'\x) — > (ix = t'x)- Let us consider an 
arbitrary tuple t S out''' with (say) tx = 0. If we consider the tuple t' = t[x := 1], 
then this tuple is such that t'\x = t\x, and therefore does not belong to out"^ (if it 
did, then we'd have t'^ = tx)- Because values and 1 play a symmetric role, this 
cannot be, and ouf^ = 0. (The other implication is trivial.) 

In all our reductions, we can start from any of the 5 formalisms listed in Sec. 6.1, 
and the resulting QCSP is expressed in the same formalism. It is well-known that 
deciding the truth of a QCSP in any of these formalisms is PSPACE-complete and 
the hardness result therefore holds in all 5 cases. □ 

Proposition 12. Given a QCSP (j) = {X,Q,D,C), the problems of deciding 
whether: 

— value a e Dx^ is s-fbcable, s-removable for variable Xi G X, 

— value a € Dx^ is s-substitutable to or s-interchangeable with b G Dx^ for variable 

Xi e X, 

— variable Xi € X is s-irrelevant, 
are PSPACE-complete. 

Proof. For membership in PSPACE the algorithm is similar to Prop. 11: we 
use the fact that testing whether t G out can be done in polynomial space by Prop. 
10. To check whether a property of the form Vt G out. 7 is true, we loop over all 
tuples in lexicographical order, test whether the current tuple is an outcome and, if 
so, verify that it satisfies 7. For properties of the form 3t G out. 7, we do a similar 
loop and return true iff one of the outcomes met during the loop satisfied 7. This 
works in polynomial space for all properties. 

The hardness is a direct consequence of the fact that shallow properties are 
equivalent to the deep ones in the particular case when the variable on which the 
property is asserted is at the tail of the linearly ordered set of variables. In all the 
reductions used in the proof of Prop. 11, note that we introduce a variable that 
can be introduced at an arbitrary place. The reductions can therefore be directly 
adapted to the shallow definitions. 

For instance, in the case of fixability, the reduction consisted, starting from a 
QCSP (/) = (X, Q, D, C), to construct the QCSP tp = {XU{x}, Q', D' , CU{x = 0}), 
with D'^ = {0, 1}. We consider the same reduction and impose that x be placed at 
the end of the ordered set X. Then x is shallow- fixable to 1 iff it is deep-fixable to 
1. We have proved that </> is false if variable x is deep-fixablc to 1 in tp, which is 
true if it is shallow- fixable to 1 in ip. Similarly in all cases of Prop. 11 the reduction 
directly applies to shallow property as long as we impose that the new variable x 
be put at the end of the quantifier prefix. □ 

Proposition 13. Civen a Efe QCSP (j) = {X, Q, D, C) encoded using Formalism 
(I), the problems of deciding whether: 

— value a G Dx^ is deep-fixable, deep-removable, inconsistent, implied for variable 
Xi G X, 
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— value a G is deep-substitutable to or deep-interchangeable with b € D^. for 
variable Xi G X, 

— variable Xi G X is dependent on variables V C X, or is deep-irrelevant, 

are Il^-hard and belong to n^_|_i- Moreover, for deep inconsistency, implication, 
determinacy and dependence, the problems are more precisely Il^-complete. 

The use of formalism (1) means that is a Quantified Boolean Formula of the 
form: 

0: 3Mi. VM2.---QfcMfe. C 

where the M^s are blocks of variables of alternating quantification, C is a Boolean 
circiiit built on these variables, and the last block is quantified universally 
{Qk — y) ii k is even, and existentially {Qk = 3) if A: is odd. Consistently with 
previous notation, the linearly ordered set X = {xi . . . Xn} denotes the union of all 
variables of the prefix, and the notations Ej, Aj, etc., are defined as in Section 2.1. 

For technical reasons it is more convenient to analyze the complexity of the nega- 
tions of these properties, i.e., we focus on the complexity of determining whether 
the property does not hold. So we prove that the negations are S^-hard and belong 
to (The problem of testing whether a E^QBF is false is H^-complete.) 

Proof, (membership results) For consistency, membership in is shown as 
follows: we are given a formula 4> of the aforementioned form, as well as a and Xj, 
and we want to test whether 3t G ouf^. t^i = a. We use a reduction similar to the 
one used by Prop. 10, and construct a formula which is true iff the property holds. 
The formula used in Prop. 10 imposes additional constraints whose role is to make 
sure that the outcome belongs to the set of scenarios of any winning strategy of the 
produced formula. In our case the outcome in question is quantified existentially 
and is of the form {vi, . . . , w„) with Vi = a. We obtain the formula: 

xP: 3vi,... Vr,. 3Mi.y M2- ■ -QkMk. {B AC Av, = a) (5) 

where each variable Vi ranges over D^^ and B is the conjunction: 



Vj = Vj j {xi = Vi) 

Note that the existentially quantified variables {vi,...,Vn) are not redundant 
with the XjS: we want to impose that at least one of the outcomes of tp assign Xi to 
a, whereas simply adding the constraint Xi = a would enforce it for every scenario 
of any strategy. Formula ip is true iff there exists a tuple t G ouf* such that tx^ = a 
is a direct consequence of Prop. 10. Formula tp is itself a E;j-QBF and we can 
therefore determine whether it is true in E^. 

Non- implication {3t G out. txi ^ a), Eq. 5 is simply replaced by: 




ip: 3vi,...Vn. 3Mi. VM2 • • • QkMk. {BaCA Vii-a) 



Non-determinacy is expressed as 3t G out. 3b ^ txi- t[xi :— b] G out or, 
equivalently, as 3t G out. 3t' G out. t'\x\{xi} — Ax\{xi} A t'^. ^ tx^- We have to 
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assert the joint existence of the two outcomes t and t' , whose values on variables 
noted {v\, . . . ,Vn) and {v[, . . . ,v'^), respectively. We obtain: 

i): 3vi,...Vn.3v[,...v'^. \ h 3Mi.^M2---QkMk. {B AC) 

\ A 3M[. VM^ • • • Q'kM'^. [B' A C") 

Now we note that the two matrices {B A C) and {B' A C") are imposed on disjoint 
sets of variables (the unprimed and the primes variables, respectively), so we can 
rewrite the previous formula in a form, as follows: 

i): 3vu...Vn.3v[,...v'^. 3Mi,M(. VM2,M^ 

\ • • ■ QkMk.,Ml (B AC AB' AC) 

Non-dependence can be stated as 3t G out. 3t' G out. {t\v = t'\v) A {tx^ t^.), 
relying on the fact that the domain only has two values; the proof is similar except 
that V has the following form: 



A v[i=Vi A \ 



V': 3vi,...vn.3v[,...v'^. I 3Mi,M{.VM2,M^ 

■■■QuMk.Ml. [B AC A B' AC) J 

For the other properties it is less obvious to see whether the upper bound of 
holds, because their negations are defined as follows: 

— Non-fixability can be expressed as 3t € out. t[xi := a] ^ out or, equivalently, 

3t G out. 3t' ^ out. t'\x\{xi} = t\x\{x,} A t'x^ = a; 
— Non-substitutability as 3t G out. {t^i = a) A {t[xi := b] ^ out) or, equivalently, 

3t G out. 3t' (jL out. t'\x\{xi) = Ax\{x^i Atx,=aA t'^^ = b; 
— Non-removability as 3t G out. (t^j = a) A (V6 / a. t[xi :— b] ^ out) or, 

equivalently, as 3t G out. W ^ out. {t'\x\{xi} = t\x\{xi}) ^ ^xi = t'x,; 
— Non- irrelevance is expressed as 3t G out. 3t' ^ out. t'\x\{xi} ~ t\x\{xi}- 

The problem is that in each case wc need to find both an outcome t and another 
tuple t' which is not an outcome. The quantifier pattern for asserting that t is not 
an outcome is now of the form VMi. 3M2 • • • QkMk, where Qk is the dual quantifier 
to Qk- For instance for non- irrelevance the obtained formula has the following form: 

3vu...Vn.3v[,...v'„. A 3Mi.yM2---QkMk. {B AC) 

V A VM{. 3M^ ■ ■ ■ QkkM'k- (--B' V -C") 

Similarly to before, the variables involved in the matrics {B AC) and {-'B'V-'C) 
are disjoint and we can merge them into one prefix. We rename the indexing of the 
primed blocks as follows: 

3vi,...Vn.3v[,...v'^. A 3Mi. VM2---0feMfc. (SAC) 

V A VM^. 3M^ • • • Qk+iM^^^. {-nB' V ^C") , 
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and obtain: 

\ ■■■ QkMk. Qk+iMk+i {{B AC) A i^B' V -C')) , 

which is in form. Wc obtain a similar formula with minor changes for fixability, 

substitutability and removability. □ 

Proof, (hardness) The hardness part is easy, bccansc in all the reductions used 
in Prop. 11 to show the PSPACE-hardness of the properties, we reduced the 
problem of determining whether a QCSP (p false to the problem of cheeking 
the considered property for a new formula ip. The new formula ip was constructed 
by introducing a new existential variable and this variable could be added into any 
quantifier block. Because of that, we can always make sure that the quantifier prefix 
of tp follows the same alternation as the one of (p, and we can therefore reduce the 
problem of determining whether a S^QBF is false to the problem of testing the 
considered property is verified by a Sj^QBF. 

For instance the reduction used to prove that inconsistency is PSPACE-complete 
was as follows: we reduced any QCSP (j) : 3Mi. VM2. • --QkM^. C to the QCSP 
■0 : {x}. yM2- ■ ■ ■ QkMk. C with = {a}. We had not specified the precise 

existential block in which the new variable x was added because the proof was 
precisely independent of that. We can now impose that it be inserted in the first 
block Ml. This shows that we can reduce the problem of falsity for S^QBFs to 
the problem of inconsistency for S^QBFs. Similarly, all the other proofs can be 
directly adapted to bounded quantifier alternations. □ 

Proposition 14. Let 4> = {X,Q,D,C) be a QCSP where C = {ci,...,Cm}- 
We denote by (f)k the QCSP {X,Q,D,{ck}) in which only the k-th constraint is 
considered. We have, for all Xi € X , V C X , and a,b & D^.: 

— ( Vfcei m inconsistent'^'' (xi.a) ) inconsistent'^ {xi, a); 

~i Vfeei..m inaplied'^'' {xi,a) ) implied'^ (xi, a); 

— ( ^kel..m d-fixable'f"'{x„a) ) ^ d-Rxablc'^{x,.a); 

— ( Afeei m d-substitutable'^'' {xi, a, b)) ^ d-substitutable'^{xi,a, b); 

— ( Afeei m d-interchangeable'^'' {xi, a, 6) ) ^ d-interchangeable'^ {xi, a, h); 

— ( Vfeei..m determined'^'' {xi) ) determined'^ {xi) ; 

— ( Afeei m d-irrelevant'^'' (xi) ) d-irrelevant"^ (xi) ; 

— ( y^^i ^ dependent^" {V,Xi) ) ^ dependent"^ {V,Xi). 

Proof. These propositions rely on the following monotonicity property of the 
set of outcomes: if we have two QCSPs cpi = {X, Q, D, Ci) and (j)2 = {X, Q, D, C2) 
(with the same quantifier prefix) and if sol'^^ C sol"^^ then ouf^^ C out"^^. This is 
easy to see: any winning strategy s for ^1 is such that sce(s) C sol'^\ Then it is 
also such that sce(s) C sol"^^ and it is a winning strategy for (j)2. 

The proofs for inconsistency, implication and determinacy directly follow: 
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— For inconsistency: if for some k we have G out'^'' . ^ a, then we also have 

Vt G ouf^. troi ^ a, because ouf^ C out"^*^. 
— For impUcation: if for some k wc have Vt G out''^''. t^i = a, then we also have 

yt G ouf^. = a, because ouf^ C ouf^^ 
— For determinacy: if for some k we have Vt G out''^*^. V& tx^- t[xi := b] ^ out'^'', 

then we also have Vt G out^. V6 7^ t^f t[xi := h] ^ ouf^ C out'^''. 
— For dependence: if for some k we have Vi,t' G out'^''. t\v = t'\v t^^ = t'^.i 

then wc also have Vt,t' G ouf^. t\v = t'\v = t'^. because out"^ C out'^'=. 

Consider now deep fixability. We assume that forall k and forall t G out'^'' we 
have t[xi := a] G out'^'=. We consider a tuple t G out"^; since out'^ C out'^'' for all 
k, t belongs to every ouf^*, and therefore t[xi := a] belongs to every ouf^*" and 
therefore to every sor''. We conclude that t[xi := a] e sol"^ = nfcSol'^\ We have 
seen in Prop. 2 that deep fixability can be stated as Vt G out'^. t[xi := a] G sol"^, 
which completes the proof. 

For deep substitutability. We assume that forall k and forall t G out'^'° we have 
txi = a ^ t[xi := b] G out'^'= . We consider a tuple t G out'^ such that txi = a; since 
out"^ C out'^'-' for all fc, t belongs to every out'^'=, and therefore t[xi := b] belongs 
to every ouf^* and therefore to every so\'^'° . We conclude that t[xi := b] G sol"^ = 
rifcSol'^''. We have seen in Prop. 2 that deep substitutability can be stated as 
yt G out*, = a ^ t[xi := b] G sol*, which completes the proof. 

For deep interchangeability the result follows since two values a and b are inter- 
changeable iff a is substitutable to b and b is substitutable to a. 

For deep irrelevance we use a result of Prop. 5: variable Xi is irrelevant iff it 
is fixable to any value a G Dx^. If forall k we have d-irrelevant'^'' (xi) then we 
have, forall k and forall a G fxj, d-fixable'^'' {xi,a). It follows that, forall a G Dx^, 
d-Gxable'^{xi,a). This is equivalent to d-irrelevant'^{xi). □ 
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